[Qemu-devel] [PATCH 10/16] os-posix: Provide new -runas : facility

2018-04-24 Thread Ian Jackson
This allows the caller to specify a uid and gid to use, even if there is no corresponding password entry. This will be useful in certain Xen configurations. We don't support just -runas because: (i) deprivileging without calling setgroups would be ineffective (ii) given only a uid we don't know

Re: [Qemu-devel] [PATCH 10/16] os-posix: Provide new -runas : facility

2018-04-20 Thread Markus Armbruster
Ian Jackson writes: > This allows the caller to specify a uid and gid to use, even if there > is no corresponding password entry. This will be useful in certain > Xen configurations. > > We don't support just -runas because: (i) deprivileging without > calling setgroups would be ineffective (ii

[Qemu-devel] [PATCH 10/16] os-posix: Provide new -runas : facility

2018-04-19 Thread Ian Jackson
This allows the caller to specify a uid and gid to use, even if there is no corresponding password entry. This will be useful in certain Xen configurations. We don't support just -runas because: (i) deprivileging without calling setgroups would be ineffective (ii) given only a uid we don't know